Privacy Policy

0. Who this policy applies to

This policy applies to two groups of users:

• Regular Users (Charterers): browse boats, make enquiries and bookings. Regular users do not connect Google accounts.
• Boat Owners (Operators): list boats and may optionally connect a Google Calendar to manage availability and bookings.

1. Introduction

This Privacy Policy explains how Charter Boats Direct Pty Ltd ("CBD," "we," "our," or "us") collects, uses, stores, and protects your personal information when you use our boat charter booking platform. We are committed to protecting your privacy and ensuring the security of your personal data.

2. Information We Collect

2.1 Personal Information (All Users)

• Name (first and last name)
• Email address
• Phone number
• Payment information (processed securely through Stripe)
• Booking preferences and history

2.2 Google Calendar Data (Boat Owners Only)

When a boat owner connects their Google Calendar to our platform, we collect and use limited calendar data to operate core booking features:

• Calendar availability information (free/busy time ranges)
• Event details only for booking events that we create or update
• Calendar metadata needed to identify and associate the correct boat calendar

Purpose: We use Google Calendar data exclusively to:

• Display availability to potential customers
• Automatically block out times when bookings are confirmed
• Sync booking information with the owner's chosen calendar
• Prevent double-bookings and cross-boat scheduling conflicts

Regular users do not connect Google accounts and no Google Calendar data is collected from them.

3. How We Use Your Information

• To facilitate boat charter bookings between customers and operators
• To process payments and manage transactions
• To communicate with you about bookings and services
• To provide customer support
• To improve our platform and services
• To comply with legal obligations
• To manage calendar availability and prevent scheduling conflicts (boat owners only)

4. Google Calendar Data Usage (Boat Owners Only)

4.1 OAuth Scopes Requested and Purposes

• calendar.events: Create and update booking events in the owner's selected calendar when bookings are confirmed, modified, or cancelled.
• calendar.freebusy: Read free/busy time for selected calendars to check availability and prevent double-bookings.
• calendar.calendarlist.readonly: Read the list of the owner's calendars to let the owner choose the correct boat calendar and ensure bookings map to the intended calendar.

4.2 Data Access and Use

We access Google Calendar data only to provide core booking functionality. Specifically:

• Reading availability (free/busy) for selected calendars
• Creating and updating booking events
• Identifying calendars so each boat can be linked to the correct calendar

4.3 Limited Use, Minimization, and Human Access

• Data is used only to provide user-facing features within our app.
• We do not sell, rent, or transfer Google data for advertising or marketing.
• No human access to Google data unless required for security, legal compliance, or troubleshooting with your consent.
• No use to train AI or machine learning models.
• No combining with third-party data for profiling unrelated to requested features.
• We retain only what is necessary to operate booking features and comply with law.

5. Information Sharing

We share your information only in the following circumstances:

• With Boat Operators: When you make a booking, we share your name, email, and phone number with the operator so they can provide the service
• With Service Providers: We may share data with trusted third parties who help us operate our platform (e.g., Stripe for payments, Vercel for hosting)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In the event of a merger or acquisition, with your explicit consent

We do NOT sell, rent, or trade your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Secure data storage and backup procedures

7. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Withdraw consent for Google Calendar access (boat owners)
• Export your data in a portable format
• Object to certain processing activities
• Lodge a complaint with the relevant data protection authority

Revoking Google Calendar Access: Boat owners may revoke our access to Google Calendar data at any time via Google Account settings: https://myaccount.google.com/permissions

8. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Improve our platform and services

When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes. To request deletion or export of your data, please email accounts@charterboatsdirect.com.au.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze how you use our platform
• Improve our services and user experience
• Ensure platform security and functionality

You can control cookie settings through your browser preferences.

10. International Data Transfers

Some of our service providers may be located outside Australia. When we transfer your personal information internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

11. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top of this policy. Your continued use of our services after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: